CVE-2015-3001

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

6.82% chance of exploitation in the next 30 days, 94th percentile

Published

2015-06-08

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/43885

References

• CVE Record
• NVD entry

Related

• CVE-2015-3000
• CVE-2015-3008
• CVE-2015-2999
• CVE-2015-3035
• CVE-2015-2998
• CVE-2015-3036